General
- Target 2026-07-18_5bfe0b4a653f231cdf17e834165d47f5_darkgate_datper_elex_gcleaner_trigona
- Size 359KB
- Sample260718-vbmbfsf15q
- SHA256 e9b1e57e1823b73f1e34ddb5b2e79e7b041b01181fac326aa0e37034bda8e4b8
- MD5 5bfe0b4a653f231cdf17e834165d47f5
- SHA1 18f0a83dd3f6a1ba640100aef873c1b7e17f4577
- SHA512 de00535ea471dd2ac087e64d284514911904963bdd1906f5c94d824122db075df42c30f495d16dbec3832a290214fefdae864250d5d5443b5f10e2d20c278333
- SSDEEP 6144:ox2QdiglMFGfzIBeZO8Wf2cMRwCO/xZqqDLuX+4pQNL27a7Kh:oAQsgScEydwCJqnuu4U2m7Kh
- TLSH T106745A3EA6814436E0710AF88B65931C503F7E2409F55C5E2DDB4AF8CD3B6532E3AB96
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-18_5bfe0b4a653f231cdf17e834165d47f5_darkgate_datper_elex_gcleaner_trigona.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_5bfe0b4a653f231cdf17e834165d47f5_darkgate_datper_elex_gcleaner_trigona.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_5bfe0b4a653f231cdf17e834165d47f5_darkgate_datper_elex_gcleaner_trigona
- Size 359KB
- SHA256 e9b1e57e1823b73f1e34ddb5b2e79e7b041b01181fac326aa0e37034bda8e4b8
- MD5 5bfe0b4a653f231cdf17e834165d47f5
- SHA1 18f0a83dd3f6a1ba640100aef873c1b7e17f4577
- SHA512 de00535ea471dd2ac087e64d284514911904963bdd1906f5c94d824122db075df42c30f495d16dbec3832a290214fefdae864250d5d5443b5f10e2d20c278333
- SSDEEP 6144:ox2QdiglMFGfzIBeZO8Wf2cMRwCO/xZqqDLuX+4pQNL27a7Kh:oAQsgScEydwCJqnuu4U2m7Kh
- TLSH T106745A3EA6814436E0710AF88B65931C503F7E2409F55C5E2DDB4AF8CD3B6532E3AB96
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects command variations typically used by ransomware
-
Drops desktop.ini file(s)